$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: wAPsUUbSAoB71++J6DA2YzwMP2jZEr6O9A6ssPbxJlc= Subject key identifier: 9A:17:3A:83:C6:CF:66:CF:70:1E:5E:74:8C:D7:74:11:3D:FB:3C:F7 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019E1C47297FEE3325BF62036B066E0C03AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 1924 Signing time: Tue 12 May 2026 13:01:26 +0000 Manifest this update: Tue 12 May 2026 13:01:26 +0000 Manifest next update: Wed 13 May 2026 13:01:26 +0000 Files and hashes: 1: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: 5LD168JTMAacDDesvNuiDoveP6RZQp5R1ztFhasMXlE=) 2: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=) 3: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=) 4: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=) 5: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=) 6: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=) 7: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=) 8: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=) 9: MAbKsaJixjU16-YxviDdUW3E9O0.roa (hash: G7uQcrymoMNiTSNS0GkaRs7zRkNHWrcTl4RG77CdYN0=) 10: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=) 11: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=) 12: a4e-5HcXuyyRW82YjyXKassrVo8.roa (hash: LjIo0mjkPTCoI0owtR5lNhwGCbcbFzLDlXxT76bUTMg=) 13: gjhjBLir8IRFlK670wG4nH4oaXk.roa (hash: cv4ygh/KOqNvTQ/oTMBYXfBkQ2u91AyKM5PUQ/5gKm8=) 14: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 13 May 2026 13:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1c:47:29:7f:ee:33:25:bf:62:03:6b:06:6e:0c:03:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: May 12 13:01:26 2026 GMT Not After : May 13 13:01:26 2026 GMT Subject: CN=9a173a83c6cf66cf701e5e748cd774113dfb3cf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:19:dc:70:5e:b6:2c:79:47:67:0b:2b:e5:61: 8d:28:1e:8e:45:a4:f6:3e:cb:56:17:2a:35:d1:d5: 8c:ce:b0:6b:2c:d8:94:54:ba:46:fd:b7:56:82:91: 1c:70:8b:3d:f7:1b:98:3d:3d:96:d3:9e:6b:ec:27: 07:b4:a7:5b:66:48:fb:c6:3b:80:02:a5:f5:39:e9: 9f:dd:1b:14:38:e4:b2:0c:06:1d:ce:1a:fa:a7:7b: 74:34:fd:f7:6a:7b:ab:00:7f:e4:86:40:f9:4b:23: 99:37:3a:6c:fc:30:94:60:a9:16:be:8c:68:87:eb: a1:8c:ea:62:9f:3b:17:47:b5:c0:fd:ab:8a:8d:e3: 76:c9:5b:09:a5:30:3d:75:0c:ca:18:b4:15:0b:b8: ad:1a:3c:15:79:02:c9:d0:2b:ec:3e:0e:c4:02:28: 5a:10:48:66:6d:a4:85:e6:0c:eb:3c:da:71:06:1e: 28:8c:5b:d6:3c:7c:1a:e0:f2:a0:1a:d7:f2:b0:72: 5b:b2:ef:6c:ac:a8:9a:74:a1:11:8a:25:bd:ff:c1: 0e:a4:8f:03:70:b0:b4:02:28:68:c6:b1:1b:6b:63: 6c:7a:aa:11:69:f3:59:fb:66:a4:d4:5f:70:01:0f: 51:f0:a7:17:3e:2c:21:75:51:d3:a8:13:bb:b7:a3: 2f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:17:3A:83:C6:CF:66:CF:70:1E:5E:74:8C:D7:74:11:3D:FB:3C:F7 X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:61:d4:21:07:22:fa:32:4f:68:3d:36:aa:96:00:b1:bf:dc: ae:f5:37:4f:85:02:d7:5a:13:72:be:37:68:2e:75:ad:01:22: 7f:ac:b2:78:81:10:e8:f8:ff:0e:8e:e8:28:85:ba:6d:6a:8d: 21:67:9b:e0:fc:09:d3:76:ce:0e:50:55:cd:8f:3f:78:98:02: eb:a2:f6:dd:76:fe:f0:c0:ae:4c:08:c1:22:bd:b4:ff:53:c7: 2d:df:3f:d3:25:cd:33:ae:4a:29:b3:3d:83:e9:2a:13:ab:d3: e4:95:cb:8b:b4:0d:31:6a:93:eb:67:2d:63:f1:48:03:2e:f5: 44:ee:63:2a:14:9a:4a:9b:18:21:67:59:f3:70:d1:de:3d:87: 53:71:a5:b5:48:89:ae:63:54:1b:61:ab:74:ef:aa:d5:e1:98: fa:9d:94:cd:03:4d:b0:0b:7e:1e:ac:e5:35:8d:9f:16:cf:8c: c1:2a:a5:bb:90:fd:72:a5:2c:8a:fb:9d:d8:d8:93:f0:a1:1c: 43:e4:d5:a8:53:cb:72:be:b9:ca:24:47:6a:87:02:d5:07:38: b8:64:9d:65:35:b8:b9:40:80:1b:a4:c3:25:47:51:6a:4c:49: 95:e9:b9:88:ed:44:1d:78:5f:77:38:a4:d1:bf:f0:c2:fa:89: e1:b4:16:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4cRyl/7jMlv2IDawZuDAOqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwNTEyMTMwMTI2WhcNMjYwNTEzMTMwMTI2WjAzMTEwLwYDVQQD Eyg5YTE3M2E4M2M2Y2Y2NmNmNzAxZTVlNzQ4Y2Q3NzQxMTNkZmIzY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hnccF62LHlHZwsr5WGNKB6ORaT2 PstWFyo10dWMzrBrLNiUVLpG/bdWgpEccIs99xuYPT2W055r7CcHtKdbZkj7xjuA AqX1Oemf3RsUOOSyDAYdzhr6p3t0NP33anurAH/khkD5SyOZNzps/DCUYKkWvoxo h+uhjOpinzsXR7XA/auKjeN2yVsJpTA9dQzKGLQVC7itGjwVeQLJ0CvsPg7EAiha EEhmbaSF5gzrPNpxBh4ojFvWPHwa4PKgGtfysHJbsu9srKiadKERiiW9/8EOpI8D cLC0AihoxrEba2NseqoRafNZ+2ak1F9wAQ9R8KcXPiwhdVHTqBO7t6MvEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoXOoPGz2bPcB5edIzXdBE9+zz3MB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGHUIQci +jJPaD02qpYAsb/crvU3T4UC11oTcr43aC51rQEif6yyeIEQ6Pj/Do7oKIW6bWqN IWeb4PwJ03bODlBVzY8/eJgC66L23Xb+8MCuTAjBIr20/1PHLd8/0yXNM65KKbM9 g+kqE6vT5JXLi7QNMWqT62ctY/FIAy71RO5jKhSaSpsYIWdZ83DR3j2HU3GltUiJ rmNUG2GrdO+q1eGY+p2UzQNNsAt+HqzlNY2fFs+MwSqlu5D9cqUsivud2NiT8KEc Q+TVqFPLcr65yiRHaocC1Qc4uGSdZTW4uUCAG6TDJUdRakxJlem5iO1EHXhfdzik 0b/wwvqJ4bQW9g== -----END CERTIFICATE-----Generated at Tue May 12 21:23:43 2026 by rpki-client